 |
Puppy Linux Discussion Forum Puppy HOME page : puppylinux.com "THE" alternative forum : puppylinux.info
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in|
The time now is Thu 31 Jul 2014, 10:10 All times are UTC - 4 |
 Forum index » Off-Topic Area » Security |
|
Why Puppy's Light Encryption Option is a Joke (Educational)
|
 
|
View previous topic :: View next topic |
| Page 2 of 2 [18 Posts] | Goto page: Previous 1, 2 |
| Author | Message | ||||
|---|---|---|---|---|---|
SFR
 Joined: 26 Oct 2011 Posts: 1044 |
This thread reminds me my own struggles with XOR encryption on C64, many years ago. Right after I wrote such tool I discovered that if file contains a longer string of the same bytes, the whole encryption is worth nothing. 
How hard I tried to make it more 'secret'! Even I added tracing of $d012 cell (current raster line position) to encryption algorithm to make it more complex.
And the effect was pretty cool: eg. "aaaaaaaaaaaaa" string encrypted with "a" passphrase has produced something like "dZ@2&"{[6g]'\!" as output! Unfortunately, I just read somewhere that even this can be cracked using "frequency analyzing" or something like that... Anyway, this thread (again) inspired me to write another encryption tool. Details here: http://www.murga-linux.com/puppy/viewtopic.php?t=75404 It uses openssl and AES, so I hope it's more secure..? 
Greetings! _________________ [O]bdurate [R]ules [D]estroy [E]nthusiastic [R]ebels => [C]reative [H]umans [A]lways [O]pen [S]ource Omnia mea mecum porto. |
||||
|
|||||
 |
|||||
Digital_Dissident
 Joined: 02 Mar 2010 Posts: 25 Location: U.S.- E. Coast |
"go without saying"?! I came across this post just last week by accident. Thankfully, still before anyone had access to my "light encryption" save file. The OP in this thread is dated December, 2009-- over two years ago now-- and the latest Puppy releases still suggest choosing "light encryption" when creating a save file that will be saved to a hard drive! And this post is relegated to an "off-topic" section and a cavalier tone?! "Educational"? This is an essential warning! Why was it never stickied to the very top of the forum? I am flabbergasted. Surely there are at least some Puppy users out there who are at risk of having their sensitive data compromised and they don't even know it. |
||||
|
|||||
|
|||||
Pizzasgood
 Joined: 04 May 2005 Posts: 6270 Location: Knoxville, TN, USA |
Though I posted this in 2009, the weakness had been known to the forum since not long after it was implemented, whenever that was (2005?). If Puppy is recommending the light option, then I agree it should be changed around. It should strongly encourage the use of the heavy option. People should only use the light option if they have already tried the heavy one and actually noticed a performance hit, and even then only if they are not very concerned about their data falling into the wrong hands. The selection page should clearly state that the light option is trivial to break, with a big all caps WARNING label included. _________________ Between depriving a man of one hour from his life and depriving him of his life there exists only a difference of degree. --Muad'Dib  |
||||
|
|||||
|
|||||
| Page 2 of 2 [18 Posts] | Goto page: Previous 1, 2 |
|
|
View previous topic :: View next topic |
|
Forum index » Off-Topic Area » Security |
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum |
Powered by phpBB © 2001, 2005 phpBB Group